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Resource Management Staff 


09-7 - 
7199 a 
Washington, 2 20505 ; 


ITHC/MM 80-2408 
7 26 arch 1986 


a 
MEMORANDUM FOR: Director of Centrai Intelligence ; 
VIA; Deputy to the DCI for Resource Management 
FROM: 
Director, Information Resources Office 
SUBJECT: Project SAFE 
REFERENCE: A. Your memo of 21 March, Subject: Concern 


Regarding SAFE (Tab A) 


8. Memo from i Chairman, STAF 
to DCI dtd 18 Mar 1980, Subject: Questiens 
Regarding SAFE (Tab BR) 


l. I appreciate the opportunity to comment on the issues 
raised by the STAP Panel in connection with the SAFE Project. As 
background to our comments, I should point out that last veer, 
after discussions between the D/DCI/RM, the DOCI, and DDA, it was 
determined that the focus of our interest in SAFE was to be "the 
areas of resource allocation and the relationship of SAFE tc cther 
programs on a Community-wide basis."* Although we have contirued 
to review the development of Project SAFE, cur primary attertion 
has been in accordance with the above quoted limitations. ‘{crse- 
quently, we are not prepared to comment, except in general terms, 
on many of the concerns raised in the referenced STAP memoraéncum. 


2. Of the four principal concerns listed in your memo ot 
March 21st, only one falls within the scope of IRO's response? 
bility as set forth in paragraph 1 above, namely: ¢ 

"What actions are underway to ensure that the Inte} "> - 
gence Community has access to CIA SAFE and that CIA SAFE 
has access to DIA SAFE as well as such systems as COINS 
and SOLIS?" 


*Memo from DDOCI to D/DCI/RM dated 16 March 1979, Subject: triczect 
SAFE \ 
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3. It is appropriate that your concerns along these lines 
be addressed because: 


o At the DCI's semiannual review in May 1979, it was 
stated that a direct physical link between the O7A 
and CIA systems would be provided. 


o Our review of the current version of the Systen 
Requirements Specifications indicates that such 3 
communications connection between CIA and DIA SAFE 
systems is not included in the specifications. 


o I have discussed this deficiency to the attentior of 
the SAFE Project Manager and he states that such a 
requirement will be added by amendment; that, 
although this has not yet been accomplished, such :an 
amendment will be prepared in the near future. 


4. We believe that it is crucial to the ultimate developnent 
of the types of intercommunication which are set out in your 
subject memorandum that this requirement be now formalized in the 
SAFE documentation since, if proper'y specified, it will provide 
the technical capability to enable: 


o CIA analysts to access JIA files. 


o CIA analysts to access other Community files 
through the DIA SAFE interface with the COINS 
network which is included in the current 
requirements documents. 


o DIA analysts to access CIA SAFE files. 


o Analyst to analyst communications between DIA 
and CIA analysts. 


o The capadility to permit other Intelligence 
Community components to access CIA SAFE faci!-ties 
by going through the DIA interfaces with the COINS 
or AUTODIN networks. . 

5. It should be noted that tihe proviston of the physica 
links and the technical capabilities to accomplish the above 
listed functions will not, in and of itself, result in the 

‘implementation of any of these functions. None of the SAFE 
documentation, either emanating from DIA or CIA, calls for “tise 
functions to be provided. Indeed, the original CIA SAFE docu 
mentation specifically provides that the CIA SAFE system wii, he a 
closed system accessible only by CIA personnel. The position has 
been taken by some that CIA has no validated requirement fo- 
access to any non-CIA system, including DIA SAFE. The results of 
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the IHC-sponsored Analyst Support Study indicate that this cs 
probably not the case.: Nearly half of the CIA anaiysts 

interviewed said they regularly access outside data bases 
SOLIS, the COINS Files, CIRC II, and the NPIC data system. 
Furthermore, analyst-to-analyst communication across agency lines 
was ranked the second most important Source of information by CIA 


Sucr as 


analysts and the most important source by DIA analysts. As 


automated systems develop and improve and analysts become 
increasingly confident in their use of and reliance upon direct 
access to automated systems, requirements for and the value ef 
access to external systems should increase still further. 


6. The management of the Consolidated SAFE Project Office is 
working under a handicap in this area. There has been, to our 
knowledge, no extensive formal review or update of CIA's 
functional requirements on the user side gince the decision was 
made to combine the two Programs. Without any formal statement of 
requirements from the CIA analytical community (primarily NFAC} 
which the system is designed to supnort, it is difficult for tnose 
Charged with desiqning and implementing the system to anticinace 
what those needs may be. Therefore, we suggest that either yau or 
some other appropriate authority should gfvé to the SAFE Profact 


Office some appropriate guidance which addresses these areas ar 
concern. 


7. We would call to your attertion the fact that nrovidi-a 
any access to the CIA system from D-A and more especially from 
elements of the Intelligence Commun-ty outside of DIA raises 
serious security issues. The resolution of these issues wil! 
probably require action on your part to modify the present 
interpretation of existing security policies, or in some case; 
amendments thereto. If you should cecide tnat the combined sa: ¢ 
systems should provide the types of intercommunication and Oun. ice 
access which are outlined in your areas of concern, then SOMO! 
(possibly the Computer Security Subcommittee of the DCI Securi'y 
Committee) should probably he tasked with -the responsibility 
defining the security issues, suggesting possible solutions. ead 
performing appropriate risk analyses $0 that they may be sub: ted 
to you for resolution. If this is undertaken, IRO should prabebly 
be involved in some Way Since decisions on these issues will: 
undoubtedly have major long-term effects on the feasibility of 
improving the interagency exchange of information and could aiso 
have a substantial impact on the resources which will be neecet to 
satisfy Community ADP requirements. 


8. General comments on other concerns expressed by you bese 
upon our limited perspective are: 
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We are informed that MMMMot OCR is coordinat. ng 
the CIA user interface with the CSPQ; that he is 
completely aware of the status of the project and 
consults regularly with the CSPO. 


o In the development of a project such as SAFE, it ‘5s 


extremely important that a well defined single poinr 
of contact between the users and developers be 
established and maintained. Otherwise, the systen 
developers will be faced with conflicting statement. 
of requirements. 


o If, in fact, the established lines of communications 


with the users are not adequate, perhaps the reason 

is attributable to a lack of an effective framework 
within NFAC to provide a continuing review of SAF= 

as it develops. If this is the case, we are not awire 
of it. 


o We see no evidence that “major portions of the 


proposed operational capabilities are unspecified.” 
It is, however, probably true that NFAC should cirect 
more attention to the general issue of what its 
requirements for open source material are and how 
these should be met, either through SAFE or other 
means. 


0 The decision to place SAFE on a gesign-to-cost basis 


necessarily implied some scaling down of the original 
requirements for the initial version. In consonance 
with this, NFAC did review and set priorities on tke 
original SAFE requirements. 


o It is our assessment that the €SPO is proceeding with 


development so that NFAL's highegt priorities wiil 5e 
met first and the design will accommodate the later 
addition of those functions which now enjoy a ‘lesser 
priority. 


o If some of the capabilities which this approach wr | 


require to be deferred ere considered to be important 
enough to warrant it, NFAC should develop a just-*’ - 
cation for their inclusion in the initial versior ¢f 
SAFE and the issue should be addressed during proqgrem 
review. 


In conclusion, I would take this opportunity to infor 


you of two initiatives we are taking in conjunction with the 2. 
which may have an impact on the future development of SAFE. 
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o The development of a user language for SAFE will] 
result in a common user language for DIA & CIA. 
We are exploring the possibility that this could 
become the initial step for developing user languag 
standards for use throughout the Community. This w 1] 
require the cooperation of the SAFE Project Office 
if it is to succeed. 


o We expect the IHC to recommend the development 
of a distributed system of bibliographic informa- 
tion storage and retrieval systems. If this is 
to be done, the facilities of both the DIA & CIA 
SAFE systems in this are@a will have to function. 
as part of an overall Community system. If this 
js to be accomplished, the interconnection of 
the two systems could taken on ‘added importance. 
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